Critical Path Traversal Vulnerability Found in D-Link DIR-859 Router

What changed

A serious vulnerability has been discovered in the D-Link DIR-859 router, specifically in version 1.06B01. This issue, rated as critical, allows for path traversal through the manipulation of HTTP POST requests.

The vulnerability stems from the file /hedwig.cgi, where an attacker can exploit the argument service to access sensitive files on the device.

Who is affected

The vulnerability impacts users of the D-Link DIR-859 router, particularly those operating on the specified firmware version. As the device is no longer supported, users should be aware of the risks involved.

This issue may expose various groups, including home users, small businesses, and any organization relying on this outdated router model.

• D-Link DIR-859 router users
• Home network users relying on D-Link products
• Small businesses utilizing D-Link networking equipment
• Organizations with outdated hardware still in operation

What to do

Users of the D-Link DIR-859 router should take immediate action to mitigate risks associated with this vulnerability. Given that the device is unsupported, upgrading to a newer model is highly recommended.

Additionally, monitoring network traffic for unusual activity can help identify potential exploitation attempts.

• Consider replacing the D-Link DIR-859 with a supported model.
• Regularly check for firmware updates on all network devices.
• Implement network security measures to detect and prevent unauthorized access.